Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.mft
File:                     Dq4tMx8sQoDBaqi6_hb93M43FbQ.mft (raw, json)
Hash identifier:          r1bC0lIwsF68mxGrgOAp+oVlpPpC8ALRKDYIY+UI2sU=
Subject key identifier:   36:20:F5:F3:91:F2:D3:F8:76:E9:2D:33:8C:F4:36:A3:F9:6A:53:6C
Authority key identifier: 0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4
Certificate issuer:       /CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
Certificate serial:       0E45
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.mft
Manifest number:          0E20
Signing time:             Sun 10 May 2026 11:08:07 +0000
Manifest this update:     Sun 10 May 2026 11:08:07 +0000
Manifest next update:     Tue 12 May 2026 11:08:07 +0000
Files and hashes:         1: 1NvRIIgsw36jv1JPruOnfe6B5l0.roa (hash: wr3wO5pomnNqcHXEV81x9pHMfpgLRKocC+eB8odzGOM=)
                          2: Dq4tMx8sQoDBaqi6_hb93M43FbQ.crl (hash: 8w8/ObLhIZh4KT38w8NG8507jw1Cn7YaniIV014wwpI=)
                          3: G-5dGJndFPFIremaQBKGeQKwP8Q.roa (hash: B+r3PMQY8uNMEqm8kK8RjU1199TgiLGEM15rS1U0OGg=)
                          4: Htxl_uoKAitIQFAJGQAgxPhPNvk.roa (hash: 4PmV98CZgMZWAzeosi+ZZUuYXqKRNzTjh9rXffo9sH0=)
                          5: I7qwI1gfHdruaMYPjd4UjAzM860.roa (hash: KoRXGMrjBVfQWe2i4f9nTPNoh8jjf6pAhx14M5muY60=)
                          6: KKgUhz5JbyNufz1xuD3J3xbebvs.roa (hash: kbZEbvVI6dBggqmORJ0fOYZHz3Cqdm34XYO3IXze8kI=)
                          7: UFlnU4ikGwoLgzaep6hE8NmifZw.roa (hash: y5mFasOvnGkNoWDCHh8uVuNT8BOc9XOeXztFBTtKPKA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3653 (0xe45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
        Validity
            Not Before: May 10 11:08:07 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=3620F5F391F2D3F876E92D338CF436A3F96A536C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:59:0a:c7:b0:89:f4:cf:cc:dd:4a:80:17:
                    b7:2e:96:a6:db:53:a3:d3:64:73:82:a5:ab:fa:b1:
                    0c:d9:2a:a0:72:ae:41:98:81:ef:b3:34:f5:6f:dd:
                    25:6a:17:50:15:8e:df:50:28:a1:7b:e7:58:84:2f:
                    92:6c:eb:91:8b:b8:d3:50:30:09:14:8e:93:b7:ff:
                    9a:be:d2:55:ec:0b:c4:c7:de:92:9a:5d:23:48:69:
                    44:6b:31:aa:1f:32:6f:5e:68:ed:18:bc:bd:33:fb:
                    6a:02:4b:a3:fd:e1:4e:50:5a:0f:9a:3f:37:48:71:
                    b3:e0:40:aa:4e:37:78:c9:69:c5:c2:90:09:3b:53:
                    53:d4:f8:8b:eb:e7:eb:60:4c:ce:ae:c1:21:99:d4:
                    c9:e0:17:ab:7e:81:e5:81:35:2f:41:10:07:d7:a8:
                    f6:ca:b2:d1:9b:22:36:e4:82:05:f2:0f:20:97:d4:
                    34:91:51:82:ca:cf:bd:83:a8:e3:30:4a:58:cc:ac:
                    02:fb:ac:26:d5:e4:3e:3e:25:a5:af:92:de:cc:3e:
                    a3:49:ea:29:15:d8:07:f0:39:2b:3d:39:c9:e3:c9:
                    14:c7:2a:27:29:e5:23:6e:d1:a2:45:be:13:22:e7:
                    2e:d1:b5:18:da:94:0f:c0:b6:a1:9a:74:70:3a:1e:
                    b2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:20:F5:F3:91:F2:D3:F8:76:E9:2D:33:8C:F4:36:A3:F9:6A:53:6C
            X509v3 Authority Key Identifier:
                keyid:0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:38:70:cb:9f:ef:12:7e:17:68:51:58:fc:d3:0f:ec:0b:94:
         24:3c:3a:cb:72:ab:70:61:39:6c:80:86:d1:32:a5:2f:4e:fc:
         df:9e:83:c0:a1:ca:98:52:66:70:34:cc:7e:42:97:ae:a2:b6:
         60:71:1a:3f:df:ff:f4:ad:fe:62:6c:63:7d:6f:20:f3:25:53:
         c3:b5:92:95:a5:fd:7c:7e:c1:0b:6c:82:64:f1:9d:df:0c:9b:
         a9:c7:24:c8:03:6f:92:53:9d:ae:b2:8c:ce:59:2e:92:03:fc:
         af:06:2a:49:57:70:85:e9:53:47:41:95:92:2c:00:bb:dd:30:
         70:f2:e8:40:10:af:6f:13:5f:bc:c9:28:e1:06:7f:30:9b:76:
         fe:00:2d:ed:d3:9a:68:7f:39:15:67:de:d8:1f:f7:2a:42:25:
         b3:a6:95:71:57:34:03:84:b0:19:eb:61:d7:87:78:0e:a0:60:
         2a:0a:c8:a5:ec:65:23:d5:5d:bf:b9:6b:b7:29:0f:14:02:f5:
         6e:2a:19:dc:df:4b:aa:7b:3b:93:0f:82:b1:f3:43:fb:31:7d:
         cc:7f:e0:f6:26:fb:96:29:b3:03:13:fe:c7:8d:08:1f:90:8e:
         5e:90:89:5e:9d:31:d1:4c:9e:dc:5b:bd:df:2d:03:ce:af:10:
         0c:ea:60:05
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgICDkUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEVB
RTJEMzMxRjJDNDI4MEMxNkFBOEJBRkUxNkZERENDRTM3MTVCNDAeFw0yNjA1MTAx
MTA4MDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM2MjBGNUYzOTFGMkQz
Rjg3NkU5MkQzMzhDRjQzNkEzRjk2QTUzNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzu1kKx7CJ9M/M3UqAF7culqbbU6PTZHOCpav6sQzZKqByrkGY
ge+zNPVv3SVqF1AVjt9QKKF751iEL5Js65GLuNNQMAkUjpO3/5q+0lXsC8TH3pKa
XSNIaURrMaofMm9eaO0YvL0z+2oCS6P94U5QWg+aPzdIcbPgQKpON3jJacXCkAk7
U1PU+Ivr5+tgTM6uwSGZ1MngF6t+geWBNS9BEAfXqPbKstGbIjbkggXyDyCX1DSR
UYLKz72DqOMwSljMrAL7rCbV5D4+JaWvkt7MPqNJ6ikV2AfwOSs9OcnjyRTHKicp
5SNu0aJFvhMi5y7RtRjalA/AtqGadHA6HrIRAgMBAAGjggIBMIIB/TAdBgNVHQ4E
FgQUNiD185Hy0/h26S0zjPQ2o/lqU2wwHwYDVR0jBBgwFoAUDq4tMx8sQoDBaqi6
/hb93M43FbQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFlBL0Rx
NHRNeDhzUW9EQmFxaTZfaGI5M000M0ZiUS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
RHE0dE14OHNRb0RCYXFpNl9oYjkzTTQzRmJRLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvSFlBL0RxNHRNeDhzUW9EQmFxaTZfaGI5M000
M0ZiUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB
/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVOHDLn+8S
fhdoUVj80w/sC5QkPDrLcqtwYTlsgIbRMqUvTvzfnoPAocqYUmZwNMx+QpeuorZg
cRo/3//0rf5ibGN9byDzJVPDtZKVpf18fsELbIJk8Z3fDJupxyTIA2+SU52usozO
WS6SA/yvBipJV3CF6VNHQZWSLAC73TBw8uhAEK9vE1+8ySjhBn8wm3b+AC3t05po
fzkVZ97YH/cqQiWzppVxVzQDhLAZ62HXh3gOoGAqCsil7GUj1V2/uWu3KQ8UAvVu
Khnc30uqezuTD4Kx80P7MX3Mf+D2JvuWKbMDE/7HjQgfkI5ekIlenTHRTJ7cW73f
LQPOrxAM6mAF
-----END CERTIFICATE-----
Generated at Tue Jun 16 14:25:30 2026 by rpki-client